Lucene search
+L

1274 matches found

NVD
NVD
•added 2024/04/11 1:15 p.m.•30 views

CVE-2024-32108

Cross-Site Request Forgery CSRF vulnerability in Stephanie Leary Convert Post Types.This issue affects Convert Post Types: from n/a through 1.4...

4.3CVSS4.6AI score0.002EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/04/11 12:56 p.m.•14 views

CVE-2024-32108 WordPress Convert Post Types plugin <= 1.4 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Stephanie Leary Convert Post Types.This issue affects Convert Post Types: from n/a through 1.4...

4.3CVSS5.1AI score0.002EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/04/11 12:56 p.m.•35 views

CVE-2024-32108 WordPress Convert Post Types plugin <= 1.4 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Stephanie Leary Convert Post Types.This issue affects Convert Post Types: from n/a through 1.4...

4.3CVSS5AI score0.002EPSS
SaveExploits0References1
CVE
CVE
•added 2024/04/11 12:56 p.m.•64 views

CVE-2024-32108

CVE-2024-32108 is a CSRF vulnerability in the Convert Post Types plugin for WordPress, affecting versions up to 1.4. Root cause: Cross-Site Request Forgery. Impact: unauthorized actions could be triggered by an attacker via forged requests where the user is authenticated. Exploitation details are...

4.3CVSS5.1AI score0.002EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2024/04/11 11:37 a.m.•14 views

WordPress Convert Post Types plugin <= 1.4 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Dimas Maulana Patchstack Alliance in WordPress Plugin Convert Post Types versions = 1.4...

4.3CVSS7AI score0.002EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
•added 2024/04/11 12:00 a.m.•17 views

WordPress Convert Post Types Plugin <= 1.4 is vulnerable to Cross Site Request Forgery (CSRF)

Software Convert Post Types Type Plugin Vulnerable versions = 1.4 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-32108 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 318ade0ff836 Credits Dimas Maulana Requir...

4.3CVSS6.6AI score0.002EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/11 12:00 a.m.•1 views

CVE-2024-32108: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Stephanie Leary Convert Post Types.This issue affects Convert Post Types: from n/a through 1.4...

4.3CVSS5.8AI score0.002EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2024/04/11 12:00 a.m.•15 views

WordPress Plugin Convert Post Types 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

4.3CVSS6.4AI score0.002EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2024/04/11 12:00 a.m.•14 views

PT-2024-24414 · Unknown · Convert Post Types

Name of the Vulnerable Software and Affected Versions: Convert Post Types versions 1.4 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a web application that...

4.3CVSS6.5AI score0.002EPSS
SaveExploits0References2
Veracode
Veracode
•added 2024/04/10 7:16 a.m.•23 views

Denial Of Service (DoS)

OpenEXR is vulnerable to a Denial of Service DoS.The vulnerability is due to improper input validation within the convert function in exrmultipart.cpp, which results in Denial of Service if an attacker can pass a crafted input to the function...

3.3CVSS6.9AI score0.00216EPSS
SaveExploits1References3Affected Software1
OSV
OSV
•added 2024/04/08 11:15 p.m.•4 views

DEBIAN-CVE-2024-31047

An issue in Academy Software Foundation openexr v.3.2.3 and before allows a local attacker to cause a denial of service DoS via the convert function of exrmultipart.cpp...

3.3CVSS4.5AI score0.00216EPSS
SaveExploits1References1
OSV
OSV
•added 2024/04/08 11:15 p.m.•11 views

UBUNTU-CVE-2024-31047

An issue in Academy Software Foundation openexr v.3.2.3 and before allows a local attacker to cause a denial of service DoS via the convert function of exrmultipart.cpp...

3.3CVSS5.8AI score0.00216EPSS
SaveExploits1References3
OSV
OSV
•added 2024/04/08 12:00 a.m.•13 views

CVE-2024-31047

An issue in Academy Software Foundation openexr v.3.2.3 and before allows a local attacker to cause a denial of service DoS via the convert function of exrmultipart.cpp...

3.3CVSS3.8AI score
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2024/04/08 12:00 a.m.•8 views

PT-2024-23739

Name of the Vulnerable Software and Affected Versions Academy Software Foundation openexr versions 3.2.3 and earlier Description An issue in the convert function of exrmultipart.cpp allows a local attacker to cause a denial of service DoS. Recommendations For versions 3.2.3 and earlier, consider...

5.5CVSS5.3AI score0.00216EPSS
SaveExploits1References21
CVE
CVE
•added 2024/04/08 12:00 a.m.•91 views

CVE-2024-31047

Academy Software Foundation openexr version v.3.2.3 and before is vulnerable to a denial of service (DoS) . A local attacker can exploit this issue via the convert function located in exrmultipart.cpp . Impacted packages include openexr , openexr-devel , and openexr-libs . Remediation and patched...

3.3CVSS6.5AI score0.00216EPSS
SaveExploits1References1Affected Software1
WPVulnDB
WPVulnDB
•added 2024/04/03 12:00 a.m.•18 views

Convert Post Types <= 1.4 - Reflected Cross-Site Scripting

Description The Convert Post Types plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in all versions up to, and including, 1.4 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pag...

7.1CVSS6.5AI score0.00354EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/03/31 6:56 p.m.•28 views

CVE-2024-31112 WordPress Convert Post Types plugin <= 1.4 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Stephanie Leary Convert Post Types allows Reflected XSS.This issue affects Convert Post Types: from n/a through 1.4...

7.1CVSS7.1AI score0.00354EPSS
SaveExploits0References1
CVE
CVE
•added 2024/03/31 6:56 p.m.•69 views

CVE-2024-31112

CVE-2024-31112: Reflected XSS in Convert Post Types for WordPress. Root cause: Improper neutralization of input during web page generation. Affected: Convert Post Types plugin (versions n/a–1.4). Severity: CVSS 3.1 base 7.1 (HIGH). Attack vector: NETWORK; Attack complex: LOW; Privileges required:...

7.1CVSS8.6AI score0.00354EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/03/31 6:56 p.m.•12 views

CVE-2024-31112 WordPress Convert Post Types plugin <= 1.4 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Stephanie Leary Convert Post Types allows Reflected XSS.This issue affects Convert Post Types: from n/a through 1.4...

7.1CVSS6.9AI score0.00354EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/31 12:00 a.m.•2 views

CVE-2024-31112: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Stephanie Leary Convert Post Types allows Reflected XSS.This issue affects Convert Post Types: from n/a through 1.4...

7.1CVSS5.8AI score0.00354EPSS
SaveExploits0References2
Rows per page
Query Builder